CVE-2019-13151

CVE-2019-13151 affects TRENDnet TEW-827DRU firmware prior to 2.05B11. The issue is a command injection in the apply.cgi endpoint, exploitable with authentication via the parameter set_sta_enrollee_pin_5g and the key wps_sta_enrollee_pin. Affected component: apply.cgi on the device firmware. Root ...